osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:NLinuxfoundation Osquery
APPLinuxfoundation< 4.4.0
Related vulnerabilities
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an a...
In some configurations an attacker can inject a new executable path into the extensions.load file for osquery ...
An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code sign...
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery bef...
containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 t...